{"action":"No fix published. Pin and monitor.","affected":[],"component":"com.glazedlists:glazedlists","cve_ids":["CVE-2023-31890"],"ecosystem":"Maven","epss":0.01013,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-p6m6-9j36-vfjx","id":"tcs_01M5N96PMK6FPTT3V1ZMY8H0VG","modified_at":"2023-11-08T04:12:32.018858Z","published_at":"2023-05-16T18:30:15Z","references":["https://osv.dev/vulnerability/GHSA-p6m6-9j36-vfjx","https://nvd.nist.gov/vuln/detail/CVE-2023-31890","https://github.com/glazedlists/glazedlists/issues/709","https://github.com/glazedlists/glazedlists","https://github.com/glazedlists/glazedlists/blob/e0593e338246945dab4e83356ef44a59db172a80/extensions/io/src/main/java/ca/odell/glazedlists/impl/io/BeanXMLByteCoder.java"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-p6m6-9j36-vfjx","url":"https://osv.dev/vulnerability/GHSA-p6m6-9j36-vfjx"}],"summary":"glazedlists XML Deserialization vulnerability"}